WEBSITE ANALYSIS REPORT

http://ikiserafan.life/peml/137261-onlyfans-leaked-nude

31 Dec 2025 · 00:34:15.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:33:50.917 GET 200 document 2.7 KB 403 ms —

00:33:51.430 GET 200 script 438.7 KB 524 ms —

00:33:51.432 GET 200 script 45.3 KB 760 ms 3 alerts

00:33:51.433 GET 200 script 42.8 KB 760 ms 3 alerts

Transaction #36

Request / response

URL

GET HTTPS

https://pollingpayoff.com/4ee2db58adb8afc709a6004b40577412/invoke.js

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://ikiserafan.life/peml/137261-onlyfans-leaked-nude

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (43789), with no line terminators
MIME type: application/javascript
First seen (UTC): 31 Dec 2025 · 00:34:24.599 UTC
Last seen (UTC): 31 Dec 2025 · 07:39:57.682 UTC
Times seen: 3

Size: 42.8 KB (43791 bytes)
MD5: b87bd38d704403ca07c85abb63b0ca8a
SHA1: c43fa0381558dc511e8dbafddc51b08d0910f3de
SHA256: 9e3d82ee82560bd04511ae846365f2d44b2c539f18d32ec4778389509dcb6d53

Certificate information

Issuer: Let's Encrypt · R13
Subject: pollingpayoff.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 38:5B:48:3E:00:12:AD:10:A2:3C:02:44:3E:B3:D3:9A:27:40:80:DA
Valid from: Sun, 02 Nov 2025 08:55:14 GMT
Valid until: Sat, 31 Jan 2026 08:55:13 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /4ee2db58adb8afc709a6004b40577412/invoke.js HTTP/1.1
Host: pollingpayoff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ikiserafan.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 31 Dec 2025 00:33:51 GMT
Content-Type: application/javascript
Content-Length: 15896
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 2
Host: pollingpayoff.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4da6cd47f69cc820c1a278789cd79e8e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

00:33:51.933 GET 200 xhr 40 B 198 ms —

00:33:51.935 GET 200 script 104.3 KB 811 ms 5 alerts

00:33:51.938 GET 200 script 77.0 KB 0 ms 5 alerts

00:33:51.947 GET 200 xhr 40 B 172 ms —

00:33:51.951 GET 200 script 6.3 KB 671 ms 1 alerts

00:33:51.952 GET 200 xhr 15.0 KB 591 ms 1 alerts

00:33:51.953 GET 200 script 77.0 KB 484 ms 1 alerts

00:33:53.074 GET 302 document 218.6 KB 356 ms 1 alerts

00:33:53.395 GET 200 document 218.6 KB 240 ms —

00:33:53.688 GET 200 script 321.3 KB 370 ms —

00:33:53.690 GET 200 stylesheet 3.0 KB 13 ms —

00:33:53.691 GET 200 stylesheet 32.3 KB 12 ms —

00:33:53.692 GET 200 script 818 B 12 ms —

00:33:53.708 GET 200 img 31.1 KB 13 ms —

00:33:53.709 GET 200 script 1.2 KB 3 ms —

00:33:53.710 GET 200 script 272.9 KB 16 ms —

00:33:53.711 GET 200 script 22.4 KB 8 ms —

00:33:53.735 GET 200 script 436.6 KB 442 ms —

00:33:53.749 GET 200 img 448 B 7 ms —

00:33:53.752 GET 200 img 448 B 6 ms —

00:33:53.754 GET 200 font 70.4 KB 27 ms —

00:33:53.757 GET 200 font 46.1 KB 11 ms —

00:33:53.763 GET 200 font 78.8 KB 29 ms —

00:33:53.779 GET 200 font 53.7 KB 22 ms —

00:33:53.813 GET 200 fetch 147 B 62 ms —

00:33:53.815 GET 200 fetch 116.9 KB 48 ms —

00:33:53.816 GET 200 fetch 250 B 51 ms —

00:33:53.817 OPTIONS 204 fetch 0 B 249 ms —

00:33:54.010 GET 200 fetch 4.7 KB 149 ms —

00:33:54.142 GET 200 img 39.4 KB 113 ms —

00:33:54.143 GET 200 img 944 B 6 ms —

00:33:54.377 GET 200 fetch 9.0 KB 61 ms —

00:33:54.506 POST 200 fetch 0 B 272 ms —

00:33:54.530 GET 200 script 27.1 KB 36 ms —

00:33:54.581 GET 200 script 419.8 KB 109 ms —

00:33:54.585 GET 200 script 57.4 KB 128 ms —

00:33:54.753 GET 200 script 23.3 KB 6 ms —

00:33:54.764 GET 200 img 0 B 32 ms —

00:33:54.772 GET 200 fetch 124 B 6 ms —

00:33:54.959 GET 200 fetch 110 B 373 ms —

00:33:55.209 GET 200 fetch 34.1 KB 7 ms —

00:33:55.221 GET 200 fetch 1.7 KB 6 ms —

00:33:55.231 GET 200 fetch 12.4 KB 6 ms —

00:33:55.254 GET 200 img 2.3 KB 5 ms —

00:33:55.256 GET 200 img 1.3 KB 5 ms —

00:33:55.257 GET 200 img 3.7 KB 5 ms —

http://ikiserafan.life/peml/137261-onlyfans-leaked-nude

Domain graph

Hostnames

Connections